Based on kernel version 3.9. Page generated on 2013-05-02 23:12 EST.
1 XFRM proc - /proc/net/xfrm_* files 2 ================================== 3 Masahide NAKAMURA <nakam@linux-ipv6.org> 4 5 6 Transformation Statistics 7 ------------------------- 8 xfrm_proc is a statistics shown factor dropped by transformation 9 for developer. 10 It is a counter designed from current transformation source code 11 and defined like linux private MIB. 12 13 Inbound statistics 14 ~~~~~~~~~~~~~~~~~~ 15 XfrmInError: 16 All errors which is not matched others 17 XfrmInBufferError: 18 No buffer is left 19 XfrmInHdrError: 20 Header error 21 XfrmInNoStates: 22 No state is found 23 i.e. Either inbound SPI, address, or IPsec protocol at SA is wrong 24 XfrmInStateProtoError: 25 Transformation protocol specific error 26 e.g. SA key is wrong 27 XfrmInStateModeError: 28 Transformation mode specific error 29 XfrmInStateSeqError: 30 Sequence error 31 i.e. Sequence number is out of window 32 XfrmInStateExpired: 33 State is expired 34 XfrmInStateMismatch: 35 State has mismatch option 36 e.g. UDP encapsulation type is mismatch 37 XfrmInStateInvalid: 38 State is invalid 39 XfrmInTmplMismatch: 40 No matching template for states 41 e.g. Inbound SAs are correct but SP rule is wrong 42 XfrmInNoPols: 43 No policy is found for states 44 e.g. Inbound SAs are correct but no SP is found 45 XfrmInPolBlock: 46 Policy discards 47 XfrmInPolError: 48 Policy error 49 50 Outbound errors 51 ~~~~~~~~~~~~~~~ 52 XfrmOutError: 53 All errors which is not matched others 54 XfrmOutBundleGenError: 55 Bundle generation error 56 XfrmOutBundleCheckError: 57 Bundle check error 58 XfrmOutNoStates: 59 No state is found 60 XfrmOutStateProtoError: 61 Transformation protocol specific error 62 XfrmOutStateModeError: 63 Transformation mode specific error 64 XfrmOutStateSeqError: 65 Sequence error 66 i.e. Sequence number overflow 67 XfrmOutStateExpired: 68 State is expired 69 XfrmOutPolBlock: 70 Policy discards 71 XfrmOutPolDead: 72 Policy is dead 73 XfrmOutPolError: 74 Policy error